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Top Stories 

• Capital One Bank confirmed that its Web site was hit by another distributed denial-of- 
service (DDoS) attack October 16. The incident was the second attack allegedly waged by 
a hacktivist group against the bank, with the group threatening new attacks on banks 
October 16-18. - BanklnfoSecurity (See item Hj 

• Distributed denial-of-service (DDoS) attacks with an average bandwidth over 20Gbps have 
become commonplace in 2012, a 230 percent increase over 2011, according to new 
security research. High bandwidth attacks were previously isolated incidents, and few 
organizations have the infrastructure to handle such attacks. - IDG News Sendee (See item 
33 ) 

• Five people were found dead in a bar outside Denver where a fire broke out October 17. 
Police believe the blaze was set to cover up the murders. - Associated Press (See item 38 ) 

• A study released by the U.S. Army Corps of Engineers October 15 said the agency did 
what it could to manage the historic 2011 flooding on the Missouri River, but more repairs, 
research, and monitoring are needed to mitigate damage in future high flow years. - 
Associated Press (See item 42) 
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Energy Sector 



1 . October 1 7, Denver Post - (Colorado) About 11,000 homes still without power after 
wind storm. A powerful windstorm October 16 knocked out power to 40,000 Xcel 
Energy customers, and many homes will be without power until October 17, officials 
said. About 9,800 homes in Denver and another 1,000 in the Greeley area are still 
without power, said a spokesman for Xcel Energy. The winds were blowing branches 
and uprooting trees that fell into electrical lines, he added. Extra crews were called in to 
restore lines and repair damage. 

Source: http://www.denverpost.com/breakingnews/ci 2179151 1/about-l 1-000-homes- 
still-without-power-after 

2. October 16, Pasadena Star-News - (California) Power plant turbine explodes in 
Pasadena, no injuries reported. A turbine at the Glenarm Power Plant in Pasadena, 
California, burst into flames October 16, fire department officials said. The flames were 
extinguished by the plant’s fire suppression system, according to Pasadena Water and 
Power (PWP) officials. The fire was contained within the turbine’s metal case and no 
injuries were reported, said a PWP spokeswoman. With a heat wave expected the week 
of October 15, PWP is looking at its energy supply — both from suppliers and its own 
production — to determine whether they will have enough. Only two of the plants five 
jet engine turbines are operating and no power outages have occurred, a PWP 
spokesman stated. 

Source: http://www.pasadenastarnews.com/news/ci 2 178472 1/power-plant-turbine- 
explodes-pasadena-no-injuries-reported 

For another story, see item 4 
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Chemical Industry Sector 



Nothing to report 
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Nuclear Reactors, Materials and Waste Sector 

3. October 17, Nuclear Regulatory Commission - (New Hampshire) Earthquake causes 
small alert at power plant. An Unusual Event - the lowest of four levels of 
emergency classification used by the Nuclear Regulatory Commission (NRC) - was 
declared by the Seabrook nuclear power plant in Seabrook, New Hampshire, October 
16 due to on-site ground motion resulting from an earthquake centered near Hollis, 
Maine, about 50 miles from the plant. The Seabrook plant was already shut down for a 
scheduled refueling and maintenance outage. Following procedures used when there is 
seismic activity affecting the plant, NextEra personnel conducted initial visual 
inspections and confirmed that all key safety systems were functioning properly and 
that there was no significant structural damage. The company will subsequently gather 
more seismic data and perform more detailed inspections. A NRC Resident Inspector 
assigned to Seabrook responded to the site to confirm that the plant was stable and that 
there were no immediate safety issues. 

Source: http://hampton-northhampton.patch.com/articles/earthquake-forces-seabrook- 
power-plant-shutdown 

4. October 16, Reuters - (National) U.S. nuclear outages seen down a third next 
spring. About 18,800 megawatts (MW) of power capacity at U.S. nuclear operators are 
expected to be offline at the peak of the 2013 spring refueling season, down roughly a 
third from the 2012 season, Reuters reported October 16. The data assumes units 
currently on extended outages, such as the two at Southern California Edison’s 2,150- 
MW San Onofre plant in California, Progress Energy Florida’s 860-MW Crystal River 
in Florida, and Omaha Public Power District’s 478-MW Fort Calhoun in Nebraska, will 
still be shut. Nuclear outages over the past five years have averaged about 23,200 MW 
in spring and 22,200 MW in the autumn. Since 1999, spring outages have peaked near 
32,800 MW in 2011 and bottomed at 16,100 MW in 2004. Autumn outages peaked 
near 27,200 MW in 2009 and bottomed at about 12,300 MW in 2004. 

Source: http://www.chicagotribune.com/business/sns-rt-us-utilities-nuclear-outages- 
springbre89flcc-20121016,0,6387721 .story 
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Critical Manufacturing Sector 
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Nothing to report 



Defense Industrial Base Sector 



5. October 17, Global Security Newswire - (Tennessee) Y-12 nuclear facility bolsters 
perimeter defenses. Authorities are moving to bolster measures intended to prevent 
potential trespassers from entering the Y-12 National Security Complex in Tennessee, 
the Knoxville News Sentinel reported October 17. Announcement of the steps followed 
a July break-in at the atomic arms facility by the members of an antinuclear group. The 
three activists infiltrated the plant’s “Protected Area” — which houses atomic arms 
activities and bomb-grade uranium storage — and had time to allegedly pour out blood, 
put up signs, and paint on the sides of buildings before they were discovered and 
apprehended. The infiltrators faced few obstacles after clipping through fencing that 
constituted one component of the perimeter intrusion-detection and -assessment system 
close to the site’s Highly Enriched Uranium Materials Facility, according to some 
assessments of the incident. Sharp-edged wiring and additional impediments reportedly 
protected separate sections of the high-security area. “Enhancements continue in 
various places throughout the site. Additional barriers have been added in some areas to 
ensure a balanced approach to security,” a National Nuclear Security Administration 
spokesman told the News Sentinel. “Included in those enhancements is the addition of 
concertina wire to areas close to the [Highly Enriched Uranium Materials Facility],” he 
added. A spokeswoman for the plant’s contract operator said October 15 that an audible 
alarm system is “fully operational” following deployment at the site in September, the 
newspaper reported. 

Source: http://www.nti.org/gsn/article/y-12-plant-bolsters-perimeter-defenses/ 

[ Return to top ] 

Banking and Finance Sector 

6. October 17, Naperville Sun - (Illinois; California) Men from Naperville, Lisle 
accused in $28 million scam. Two men were scheduled to be arraigned October 18 in 
U.S. District Court in Chicago on charges of running a $28 million Ponzi-type scheme 
targeting investors primarily in Illinois and California, according to a statement from 
the U.S. attorney’s office. One man was a principal of USA Retirement Management 
Services, which had offices in Oakbrook Terrace, Illinois, and southern California. The 
other was a company salesman who conducted seminars attended by victims of the 
alleged scam. A third man also conducted estate planning seminars targeting primarily 
retirees. According to the indictment, the men between 2005 and 2010 offered and sold 
promissory notes, in which USA Retirement “absolutely and unconditionally” 
guaranteed investors rates of 4.75 to 11 percent annually. Two of the men “falsely 
claimed that the interest would be generated from investments in Turkish bonds,” the 
statement declared. Instead they used the money to pay some investors and themselves. 
The men falsely claimed that they had years of investment banking experience and had 
profited in investing in Turkish bonds. The men had no banking experience and did not 
make any investments. The company principal and salesman are charged with five 
counts of wire fraud and four counts of mail fraud. The man who conducted seminars is 
charged with three counts of wire fraud and three counts of mail fraud. 
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Source: http://napervillesun.suntimes.com/news/15795027-418/men-from-naperville- 
lisle-accused-in-28-million-investment-scam.html 



7. October 16, Atlanta Journal Constitution - (Georgia) Husband, wife convicted in tax 
scheme. A Lawrenceville, Georgia couple was convicted for a tax defiance scheme 
after claiming that they were “American citizens” and not subject to federal income tax 
laws, the U.S. Attorney’s Office announced October 16. The husband and wife were 
found guilty by a federal jury of conspiring to defraud the United States and making 
false claims upon the Internal Revenue Service (IRS) by a federal jury. According to 
the information presented in court, the couple, who owned a yard furnishing store and 
general contracting business in Duluth, conspired to avoid taxes from 1999 to 2009 and 
submitted false claims for refunds. The couple stopped filing federal income tax returns 
in the 1990s, then hired the now-defunct American Rights Litigators (ARL) to fight the 
IRS on their behalf. ARL sold and promoted tax defiance schemes, authorities said. 

The husband and wife’s ploys to avoid taxes included sending “obstructive, frivolous, 
and harassing documents” to the IRS and Department of the Treasury, and establishing 
business bank accounts using fake tax identification numbers to hide money. In 2009, 
the couple submitted two fraudulent tax returns claiming more than $420,000 in 
refunds. They also sent the government a bogus $100 billion, private registered bond to 
pay off their debts. 

Source: http://www.aic.com/news/news/local/husband-wife-convicted-in-tax- 
scheme/nSfTY/ 



8. October 16, Imperial Valley News - (Idaho; California) Former Elk Grove man 
arrested in Idaho for $20 million investment fraud. A California man was arrested 
October 15 on federal investment fraud and bankruptcy fraud charges in Caldwell, 
Idaho, involving a $20 million investment fraud scheme. The man was charged in a 24- 
count indictment with wire fraud, false statements in bankruptcy, and bankruptcy 
bribery. The indictment alleges that he carried out an investment fraud through an 
entity known as the Perfect Financial Group. According to the indictment, he targeted 
190 members of the ethnic Indian Fijian community. He told investors that he was 
using their money for hard money lending, but actually, he put it to other purposes. The 
indictment alleges that he lost $12 million through gambling; diverted more than $2 
million to personal bank accounts and withdrew much of that in cash; spent $880,000 
on a film project; and spent more than $1 million on other business ventures. He also 
used the money to pay other victims, falsely representing that the payments were 
profits from the short-term hard money lending business. According to court 
documents August 19, 2010, the man declared bankruptcy and committed fraud crimes 
in the bankruptcy. In the bankruptcy, he allegedly failed to disclose bank accounts and 
tried to induce his victims not to participate in the bankruptcy proceedings. 

Source: http://www.imperialvallevnews.corn/index.php/news/latest-news/2000-former- 
elk-grove-man-arrested-in-idaho-for-20-million-investment-fraud.html 

9. October 16, Boulder Daily Camera - (Colorado) Boulder ‘Face-Off Bandit,’ pleads 
guilty to aggravated robbery. The “Face-Off Bandit” accused of robbing four banks 
in Boulder, Colorado, pleaded guilty to one count of aggravated robbery October 16. 
The robber was originally charged with four counts of aggravated robbery but had three 
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charges dropped as part of the plea deal. He was accused in bank robberies dating back 
to December 16, 2011 at a Great Western Bank; January 19 at a First Bank; February 
15 at a Chase Bank; and March 8 at a First National Bank in Louisville. He also robbed 
a bank in Jefferson County. Authorities called him the “Face-Off Bandit” because he 
wore fake beards as disguises and left them as he fled. 

Source: http://www.denverpost.com/opinion/ci 21783048/mark-edwards-boulder-face- 
off-bandit-pleads- guilty 

10. October 16, The H - (International) Santander’s online banking keeps passwords in 
cookies. The retail Web site for Santander bank has been discovered to be keeping 
customer passwords in plain text in cookies held while the user is logged in, The H 
reported October 16. The discovery was revealed on the Full Disclosure mailing list 
when an anonymous user posted details of how credit card numbers and other 
information was stored in session cookies. According to the report, the 
“NewUniversalCookie” is base64 decoded to reveal an XML document which contains 
a name, alias, and user ID. In fact, the cookie contains multiple fields; the base64 
encoded XML document was just one of them. The H found that, in at least one case, 
upon decoding an account the innocuously named “alias” field in fact contained a plain 
text version of the user’s password. The password alone is not sufficient to access a 
Santander account as there is another registration number that needs to be used with it, 
but the presence of a plain text password does raise questions about the security 
practices of the bank’s online site. A Santander spokesperson told The H: “The data 
items stored within our cookies, if compromised, would not allow access to our online 
services on their own and our primary login processes do not rely on cookie data.” 
Source: http://www.h-online.com/security/news/item/Santander-s-online-banking- 
keeps-passwords-in-cookies-Update-1730364.html 

11. October 16, BanklnfoSecurity - (International) CapOne takes second DDoS 

hit. Capital One confirmed that its Web site was hit by another distributed denial of 
service (DDoS) attack, October 16. The incident was the second attack allegedly waged 
in October by a hacktivist group against the bank. “Capital One is experiencing 
intermittent access to some online systems due to a denial of service attack,” a bank 
spokeswoman said. “There was minimal impact to the majority of our customers.” The 
same day, a post claiming to be from the hacktivist group appeared on Pastebin 
claiming new attacks against U.S. banks would be waged between October 16 and 
October 18. The group noted that this new wave of DDoS attacks is being initiated 
without advance warning. In earlier Pastebin posts, the group named the eight banks it 
eventually attacked. A financial fraud and security consultant with CEB TowerGroup 
said the October 9 attack against Capital One, appeared to be one of the most 
damaging. “With CapOne, they seemed to take a bigger hit than the others,” he said. 
“Other banks seemed to handle the attacks better.” 

Source: http://www.bankinfosecuritv.com/capone-takes-second-ddos-hit-a-5203 
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Transportation Sector 



12. October 17, Boston Globe - (Utah) ‘Drunk’ man opens door on plane from Boston 
to Utah and furious passengers restrain him. A drunk man on Delta Flight 1215 
thought the plane was on fire when the aircraft landed in Salt Lake City October 16, 
triggering a frantic effort by the Ukrainian man to open the rear door of the aircraft, and 
a furious struggle with some passengers to restrain him. According to an FBI affidavit 
filed in federal court in Utah, the flight departed from Boston’s Logan Airport. The 
passenger told FBI agents that he was returning to Portland, Oregon, after visiting 
relatives in his native Ukraine. According to the FBI, when he ran to the rear of the 
aircraft, a flight attendant ordered him to stop, but was unable to prevent him from 
opening the emergency exit door on the starboard side of the plane. The man 
mishandled the door, causing it to malfunction, so it did not deploy the inflatable chute. 
At that point, the flight attendant asked for help from passengers. Several rushed into 
assist, according to the FBI. The disruptive passenger was scheduled to make an initial 
appearance in U.S. District Court in Salt Lake City October 17 on charges of 
attempting to disable an aircraft and assaulting and interfering with the flight crew on 
board Flight 1215. No passengers or flight crew needed medical attention. 

Source: http://www.boston.com/metrodesk/2012/10/17/drunk-man-opens-door-plane- 

from-boston-and-furious-passengers-try-restrain- 

him/dmhzatRjYaBLPgANNWxLKJ/story.html 

13. October 16, Baltimore Sun - (Maryland) City school bus crash injures 13. At least 13 
people were injured in a collision involving a school bus and a minivan in Baltimore’s 
Oldtown neighborhood October 16, according to the Baltimore Fire Department. The 
bus was transporting the National Academy Foundation #421 ’s high school girls soccer 
team, which was en route to Baltimore Polytechnic Institute for a game, said the 
schools spokeswoman. Those injured in the accident, which occurred at the intersection 
of Ensor and East Madison streets, included 1 1 students on the bus, the driver, and a 
passenger in the minivan, said a fire department spokesman. None of the injuries were 
considered life-threatening, but students and others complaining of neck and back pains 
were treated on the scene and transported to local hospitals. The driver, van passenger, 
and all 11 students were transported to area hospitals. The bus is owned by AA 
Affordable Transportation, a contractor for the city school system. 

Source: http://articles .baltimoresun.com/20 12-10-1 6/news/bs-md-ci-school-bus-crash- 
20121016 1 school-bus-area-hospitals-chief-kevin-cartwright 
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Postal and Shipping Sector 

Nothing to report 
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Agriculture and Food Sector 



14. October 17, Indiana Public Media - (Indiana) Indiana hog farmer fined for water 
contamination. The Indiana Department of Environmental Management fined a 
Randolph County hog farmer for dumping 200,000 gallons of hog manure onto an open 
field, Indiana Public Media reported October 17. The manure from the farm eventually 
made its way into a local waterway, washed downstream, and killed more than 100,000 
fish. The farmer must pay a $1,000 fine and plant 550 trees. The Department of Natural 
Resources could implement a separate penalty for killing the fish. 

Source: http://indianapublicmedia.org/news/charge-farm-owner-draws-controversv- 
38161/ " 



15. October 16, Food Safety News - (Washington) Salmonella outbreak at WA 
restaurant grows to 94. At least 94 people were suspected to have been sickened with 
Salmonella from an On the Border restaurant in Vancouver, Washington, Food Safety 
News reported October 16. That number included 29 laboratory-confirmed cases and 
65 probable cases. The bacteria strain at the center of the outbreak, Salmonella 
Virchow, is a relatively rare strain in the United States. The restaurant was allowed to 
reopen the week of October 15 after a temporary closure. Health officials stated that it 
may not be possible to determine the source of the outbreak. 

Source: http://www.foodsafetynews.com/2012/10/outbreak-cases-at-wa-restaurant- 
grow-to-94/ 

16. October 16, South Dakota State News - (South Dakota) Campylobacter bacteria 
found in raw milk produced by Black Hills Milk. The South Dakota Department of 
Agriculture reported October 16 that Campylobacter bacteria was found in a sampling 
of raw milk from Black Hills Milk in Belle Fourche, South Dakota. The milk was sold 
at a retail outlet in Spearfish, a Black Hills Farmers Market, Founder’s Park in Rapid 
City, and other locations in the Black Hills. 

Source: http://news.sd. gov/newsitem.aspx?id=l 3701 

17. October 16, U.S. Food and Drug Administration - (National) Torn and Glasser, Inc 
announces voluntary recall of Salted Virginia In-Shell Peanuts, and Organic 
Peanut Butter due to possible health risk. Torn and Glasser, Inc., of Fos Angeles, 
voluntarily recalled its Salted In-Shell product and one lot of Organic Peanut Butter 
because it has the potential to be contaminated with Salmonella. The Torn and Glasser 
recalled products contain peanuts supplied by Sunland. The product was distributed 
from November 9, 2011, to October 15, 2012, in 11 States. Product labels include: 
Gless Ranch, Sun Harvest, Tom and Glasser, and Sprouts. 

Source: http://www.fda.gov/Safety/Recalls/ucm324166.htm 

18. October 16, WLUK 11 Green Bay - (Wisconsin) Fire causes $1 million in damage to 
Rosendale Dairy. Wisconsin’s largest dairy farm, Rosendale Dairy, suffered a barn 
fire October 16. Seven fire departments battled the blaze. Damages from the fire could 
exceed $1 million. A spokesman for Milk Source FFC, which owns Rosendale Dairy, 
said the fire’s damage included an estimated $500,000 in feed and the commodity shed, 
which has an estimated value between $500,000 and $1 million. According to the 
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spokesman, the fire started when a piece of farm equipment sparked and spread to grain 
in the bam. The farm produces 78,000 gallons daily, but the fire is not expected to 
interfere with the usual workload. 

Source: http://www.foxllonline.com/dpp/news/local/fox cities/crews-battling-fire-at- 
rosendale-dairy 
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Water Sector 

19. October 17, KAYU 28 Spokane - (Washington) Contaminated water closes three 
schools, affects 1,600 homes. Contaminated water within the Trentwood Irrigation 
District of Washington prompted the closure of three Spokane Valley Schools October 
16, and affected 1,600 homes nearby. East Valley High School, East Valley Middle 
School, and Trentwood Elementary were all closed October 16, after Trentwood 
Irrigation notified the school district that a well pump malfunctioned, churning dirt into 
the water. While dirt was the only contaminant believed to be involved, Trentwood 
Irrigation recommended residents to boil their drinking water as a precaution, while 
water samples were tested. Residents living in the affected area told the media many of 
them were not notified of the contamination by the Trentwood Irrigation District, and 
felt they should have been. Trentwood Irrigation explained it does not have a mass-alert 
system, and relied on the school district and news reports to spread the word. 

Regardless of the results, school was back is session across the East Valley district 
October 17. The district would have bottled water on hand, just in case those test 
samples showed there was any cause for concern. 

Source: http://www.mvfoxspokane.com/news/local-news/story/contaminated-water- 
closes-three-schools-affects- 1600-homes 



20. October 17, Associated Press - (New York) NY farmer, NJ company convicted of 
illegal dumping. Federal authorities said a central New York farmer and a New Jersey 
waste management company owner were found guilty of conspiring to illegally dump 
tons of asbestos-contaminated construction debris on wetlands near New York’s 
Mohawk River in 2006, the Associated Press reported October 17. Convicted of 
conspiracy to defraud the U.S. and violate the Clean Water Act and Superfund laws 
was the owner of the property in Frankfort, along with owner of Mazza & Sons Inc. A 
jury found them guilty October 16 after a 10-day trial in Utica, New York. Authorities 
said they were also convicted of obstructing justice and violating the Superfund law’s 
requirement to report the release of toxic materials. 

Source: http://www.cnbc.com/id/49446286 

21. October 17, KSAT 12 San Antonio - (Texas) 50,000 gallons of raw sewage spills on 
North Side. Crews with San Antonio Water System (SAWS) were busy cleaning a 
sewage spill on the far North Side of San Antonio that fell over the recharge zone of the 
Edwards Aquifer, the city’s main source of drinking water. The spill was reported 
October 15 near the Encino Rio Subdivision southwest of East Evans and Bulverde 
roads. SAWS said more than 50,000 gallons of raw sewage spilled into a dry creek bed 
after a pipe broke at a sewer lift station off Santa Lucia Road. Crews pumped the waste 
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out of the creek bed and hauled it away, but were expected to resume the cleanup 
process October 17. 

Source: http://www.ksat.com/news/50-000-gallons-of-raw-sewage-spills-on-North- 
Side/-/47 845 2/ 1 7020662/-/u g634u/-/index .html 

22. October 16, U.S. Environmental Protection Agency - (New York) EPA finalizes 
cleanup plan for Shenandoah Road Superfund site in East Fishkill, New York. The 
U.S. Environmental Protection Agency (EPA) finalized its plan to clean up 
contaminated ground water at the Shenandoah Road Ground Water Contamination 
Superfund site in East Fishkill, New York, a press release October 16 stated. Past 
industrial activities contaminated the ground water with tetrachloroethene, commonly 
known as PCE, which is a volatile organic compound that can have serious health 
effects. The cleanup plan calls for the continued operation of a system that extracts and 
treats ground water coupled with natural processes to reduce the contaminants in the 
ground water. The ground water will continue to be periodically sampled to measure 
the effectiveness of both the ground water extraction and treatment system, and the 
natural processes. Land and ground water use restrictions will also be required. 

Between 1965 and 1975, Jack Manne Inc. rented the site in East Fishkill and operated a 
facility there to clean and repair computer chip racks supplied to it under a contract 
with International Business Machines Corp (IBM). In 2000, well sampling conducted 
by the New York State Department of Health indicated that residential wells in the 
vicinity of the facility were contaminated with PCE above the federal and State 
maximum contaminant levels. The Shenandoah Road site was placed on EPA’s 
Superfund list of the nation’s most hazardous waste sites in 2001, and EPA notified 
IBM and Jack Manne Inc. of their status as parties responsible for the cleanup. 

Source: 

http://vosemite.epa.gov/opa/admpress.nsf/d0cf6618525a9efb85257359003fb69d/65cd9 
259baa7 1881 85257a99006043fb IQpenDocument 

23. October 16, Environmental Protection - (New York) NYC commences huge upgrade 
of sewer and water infrastructure. An infrastructure upgrade in New York City will 
cost $69 million and is part of the Neighborhood Upgrade, which totals $175 million in 
funds toward flood alleviation, Environmental Protection reported October 16. The 
project will include the installation of 84 catch basins, approximately 2.8 miles of new 
sewer lines, nearly 3 miles of water mains, new streets, and new sidewalks. The project 
will be managed by the City’s Economic Development Corporation. Other tasks for the 
project include the creation of a Bluebelt, a wetland that both stores and treats 
stormwater runoff. Using green infrastructure principles, stormwater will be collected 
in the newly installed catch basins and discharged into wetlands where the water will 
be naturally filtered. All upgrades in Springfield Gardens are scheduled to be 
completed in 2014. 

Source: http ://eponline .com/articles/20 12/10/1 6/nyc-commences-huge-upgrade-of- 
se wer- and- w ater-infras tructure . aspx 

For another story, see item 14 
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Public Health and Healthcare Sector 



24. October 17, Augusta Chronicle - (Georgia) 1 dead; suspect in custody in University 
Hospital shooting. A Lincolnton, Georgia man was shot twice and killed in a 
University Hospital room October 16, and a family member was taken into custody and 
charged with murder and possession of a firearm during the commission of a crime, 
according to a Richmond County sheriff’s captain. Officials said the victim was the 
nephew of the suspect’s wife, who was being treated for an undisclosed condition, and 
the two men had been involved in a longstanding dispute over family members. A 
hospital spokeswoman said the shooting took place after the victim and a male family 
member had an argument in a mutual relative’s room on the hospital’s general 
medicine floor. After the shooting, the suspect immediately put down the gun and 
surrendered to hospital security. He was in the custody of hospital security when 
sheriff’s deputies arrived. There are no metal detectors or pat-downs to get into the 
hospital. University has its own security force, and its members were the first 
responders. The hospital will re-evaluate security procedures. 

Source: http://chronicle.augusta.com/news/crime-courts/2012-10-16/l-dead-suspect- 
custodv-universitv-hospital-shooting?v=1350403825 
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Government Facilities Sector 



25. October 17, Associated Press - (International) US Embassy Evacuated in 

Stockholm. The U.S. Embassy in Stockholm, Sweden, was evacuated October 16 after 
receiving a letter containing an unknown substance, police said. Bomb disposal experts 
were sent to the embassy to remove the letter and analyze its contents. Streets around 
the embassy were closed, but reopened after police removed the letter. Police declined 
to give details on the content but a police spokesman told Swedish tabloid Expressen it 
contained some ki nd of “powder.” It may have been dangerous, but it’s not dangerous 
now,” he added. An embassy spokesman said the embassy was evacuated and officials 
were investigating “a possible security incident” together with Swedish authorities, but 
declined to give other details. 

Source: http://abcnews.go.com/Intemational/wireStory/us-embassv-evacuated- 
stockholm- 1 7 497 869#.UH60aKCBxI 1 



26. October 17, Associated Press - (Washington, International) US-Canada crossing 
closed after agent shot. A man driving a van with Washington State license plates shot 
and wounded a Canadian border guard October 16, then died of what police believe 
was a self-inflicted gunshot wound, a Canadian police official said. The shooting 
temporarily closed the Peace Arch crossing on the U.S. -Canada border. Drivers were 
diverted to other crossings. The officer was shot in the neck and suffered serious 
injuries, a Royal Canadian Mounted Police corporal told reporters. She was breathing 
and conscious when she was flown to a hospital. The man was attempting to cross into 
Canada from the United States, police said. The Canadian border officials will 
determine when the crossing will reopen, a Washington State Department of 
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Transportation spokeswoman said. 

Source: http://www.sfgate.com/news/article/US-Canada-crossing-closed-after-agent- 
shot-3953836.php 

27. October 16, Associated Press - (Washington) Acid spill sends Spokane students 
home for day. Fire officials in Spokane, Washington, said a hydrochloric acid spill in a 
stairwell sent students and staff members home October 16 from Lewis and Clark High 
School. A fire department HAZMAT crew responded and cleaned up the mess. The 
Spokane Spokesman-Review reported that a student science assistant was transporting 
the jug of the acid when the spill occurred. The assistant fire chief said the spill was 
hkely inadvertent and there was no threat to students. There were no reported injuries 
or damage to the school. Classes resumed October 17. 

Source: 

http://seattletimes.com/html/localnews/2019448850 apwahighschoolacidspill.html 

28. October 16, KCEN 6 Temple - (Texas) Possible pipe bomb dismantled near Texas 
high school. Dewey ville High School in southeast Texas was evacuated October 16 
after a possible pipe bomb was found within a half-mile of the school on a dirt road. 
Department of Public Safety troopers initially called it a pipe bomb, but later officials 
said they were not sure if the device was an explosive. The device was dismantled by 
agents from the Bureau of Alcohol, Tobacco, Firearms, and Explosives, then sent to a 
lab to undergo testing. 

Source: http://www.kcentv.com/storv/19836078/possible-pipe-bomb-dernantled-near- 
texas-high-school 

For another story, see item 19 
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Emergency Services Sector 

29. October 16, WXIN 59 Indianapolis - (Indiana) Delaware Co. officials work to fix 
emergency dispatch problem. Delaware County, Indiana officials are working to fix a 
recurring problem with emergency communications between dispatchers and 
county wide fire departments. The latest problem occurred October 12 when a detached 
garage caught fire in Daleville. The Daleville fire chief said his volunteer department 
members never received any pages or calls about the fire. Nearby Yorktown firefighters 
also received no emergency tones. Ultimately, it was the Chesterfield Fire Department 
in neighboring Madison County who arrived after roughly 20 minutes had gone by. The 
garage was a total loss. The Delaware County 9-1-1 director said the 9-1-1 system was 
working fine. However, when dispatchers sent the call out to the fire departments, the 
call did not go through. He said a computer glitch had put a microwave transmitter on a 
Motorola tower into standby mode. So the Daleville and Yorktown Fire Departments 
never received the signal. The glitch also affected other fire departments and EMS 
services across the county. The director said the county tests the signal at 7 a.m. and 7 
p.m. each day, so the glitch must have happened sometime during October 11 or 
October 12. After a second occurrence, the county is planning a new system to test and 
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confirm the emergency dispatch signal. Rather than twice a day, the signal will be 
tested once an hour. 

Source: http://www.fox59.com/news/wxin-delaware-co-officials-work-to-fix- 
emergenc y-dispatch-problem-20 121016,0,180111 2 .column 

30. October 16, USA Today - (Texas) Texas police buy high-flying, high-tech spy 
plane. Texas has bought a $7.4 million, high-flying surveillance aircraft, which State 
police claim will be used mostly for monitoring the Mexican border, according to the 
Center for Investigative Reporting, USA Today reported October 16. The Swiss-made 
Pilatus PC- 12 NG Spectre, purchased in July, is being modified and will be delivered 
early 2013. Its surveillance gear is the same as that used by the pilotless U.S. drones in 
war zones and elsewhere around the globe. A Texas Department of Public Safety 
spokesman said the plane would operate mostly along the U.S. -Mexico border, and 
“serve as a tool in assisting specific joint operations that are clearly defined by area and 
duration.” 

Source: 

http://www.democratandchronicle.eom/usatodav/article/l 637 105?odyssev=modlnewsw 
ellltextILocal Newsls 



31. October 16, Florida Today - (Florida) Misuse of 9-1-1 charge lands woman in jail, 
growing trend. A woman was charged with six felony counts of misuse of 9-1-1 
communications after dispatchers alerted the police to half a dozen calls placed October 
13 in Brevard County, Florida. She remained at the Brevard County Jail October 16 on 
a $3,000 bond. These calls are the latest in what 9-1-1 operators said is a growing trend 
of frivolous calls to the public service lifeline. They also are receiving accidental dials 
when a cell phone is involved. Last year, Palm Bay police reported handling 125,330 
calls for service routed to the 9-1-1 dispatch center. Of those, 46,546 calls — including 
everything from shootings, robberies, heart attacks, and suspicious activities — came in 
on the 9-1-1 emergency lines. Then there are calls from citizens or bored children 
asking for directions, parade times, or other non-emergency inquiries, police said. The 
Brevard County State attorney’s office prosecuted 21 cases involving the deliberate 
misuse of 9-1-1 in 2011, statistics show. So far in 2012, the office has filed charges 
against 18 people with all of the cases pursued as misdemeanors, the State attorney’s 
office reports. A conviction could garner up to a year in jail. 

Source: http://www.floridatodav.com/article/20121016/NEWS01/121016002/Misuse- 
9-l-l-charge-lands-woman-jail-growing-trend?gcheck=l&nclick check=l 

32. October 15, Washington Post - (National) Prison crowding undermines safety, 
report says. A recent Government Accountability Office (GAO) report on the Bureau 
of Prisons says inmate overcrowding undermines the safety of the agency’s staff, as 
well as that of the inmates, the Washington Post reported October 15. The prison 
facilities are crowded because the inmate population is growing faster than the bureau’s 
capacity. As the prison population grew 9.5 percent from 2006 through 2011, the 
agency’s capacity, increasing at 7 percent, did not keep up. Even with new facilities, 
the prison population grew from 136 percent of capacity to 139 percent, according to 
the GAO. While crowding has increased, the inmate-to-staff ratio has gone down. In 
fiscal year 2010, there were almost 1,700 assaults on bureau staff, according to an April 
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2011 GAO report. 

Source: http://www.washingtonpost.com/local/prison-crowding-undermines-safety- 
report-says/201 2/10/1 5/ab77de02-16fc-lle2-a55c-39408fbe6a4b story.html 
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Information Technology Sector 

33. October 17, IDG News Service - (International) High bandwidth DDoS attacks are 
now common, researcher says. Distributed denial-of- service (DDoS) attacks with an 
average bandwidth over 20Gbps have become commonplace in 2012, according to 
researchers from DDoS mitigation vendor Prolexic. In 2011, such high-bandwidth 
attacks were isolated incidents, Prolexic’s president said October 16. Very few 
companies or organizations have the network infrastructure to handle such attacks. 
Prolexic released its global DDoS attack report for the third quarter October 17. 
According to the report, there is an 88 percent increase of attacks from the same quarter 
of 201 1. However, compared to the second quarter of 2012, the number of attacks 
actually declined by 14 percent. The average attack bandwidth during the third quarter 
of 2012 was 4.9Gbps, which represents a 230 percent increase compared to 2011, and 
an 1 1 percent increase compared to the previous quarter. The average attack during the 
third quarter of 2012 lasted 19 hours, slightly longer than in the second quarter. The 
majority of attacks — over 81 percent — targeted the infrastructure layer, while 18.6 
percent of attacks targeted the application layer. The top three countries where DDoS 
attacks originated were China with 35 percent of attacks, the United States with 28 
percent, and India with 8 percent. 

Source: 

http://www.computerwoiid.eom/s/article/9232487/High bandwidth DDoS attacks are 
now common researcher says 

34. October 16, Softpedia - (International) Blackhole/Zeus threat comes via ‘You have 
blocked your Facebook account’ spam. Malicious emails entitled “Verify your 
account” were spotted by security experts. The alerts are part of a cybercriminal 
campaign whose main goal is to lure users to Blackhole-infested, Zeus-serving Web 
sites. Fake Facebook notifications are becoming more and more interesting. Recently, 
instead of informing potential victims that their accounts were suspended by Facebook, 
spammers tell users they somehow blocked their own accounts. “You have blocked 
your Facebook account. You can reactivate your account whenever you wish by 
logging into Facebook with your former login email address and password” the shady 
emails read. GFI Labs experts indicate that the links from these messages are designed 
to take Internet users to compromised Web sites that further redirect them to fake 
Adobe Flash Player update sites. 

Source: http://news.softpedia.com/news/BlackHole-Zeus-Threat-Comes-Via-You- 
Have-Blocked-Your-Facebook-Account-Spam-299745.shtml 

35. October 16, Threatpost - (International) Zero-day attacks thrive for months before 
disclosure. Zero-day vulnerabilities and exploits dominate headlines and most heated 
information security discussions. However, there are relatively few of these attacks 
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hitting a small number of hosts, according to new research on the subject. Zero days get 
so much attention because of their effectiveness in compromising targets and avoiding 
detection. Two researchers from Symantec Research Labs examined a period of 
malware activity on a host of Symantec detection platforms from 2008 to 201 1 and 
quantified the window of exposure organizations face from attacks that are active 
before vulnerabilities are publicly disclosed. The 18 attacks they discovered in that 3- 
year timespan lasted anywhere between 19 days and 30 months, an average of 312 
days, or 10 months. That means organizations targeted by zero-day malware were 
likely compromised by a variety of malware attacking undisclosed vulnerabilities on a 
number of platforms. “For cyber criminals, unpatched vulnerabilities in popular 
software such as Microsoft Office or Adobe Flash represent a free pass to any target 
they might wish to attack, from Fortune 500 companies to millions of consumer PCs 
around the world,” the researchers wrote in a paper. Once zero-day vulnerabilities are 
publicly disclosed, attacks spike up, the researchers said, and most within 30 days of 
disclosure. “Cyber criminals watch closely the disclosure of new vulnerabilities in 
order to start exploiting them which causes a significant risk for end users,” the paper 
said. 

Source: http://threatpost.com/en us/blogs/zero-day-attacks-thrive-months-disclosure- 
101612 



Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at sos@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: https://www.it-isac.org 
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Communications Sector 



Nothing to report 
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Commercial Facilities Sector 



36. October 17, Augusta Chronicle - (Georgia) Bomb squad called to motel this 

morning; 1 arrested. The Richmond County Bomb Squad was called to a Columbia 
County, Georgia hotel October 17 after police discovered a suspicious device. A 
Columbia County sheriff’s captain said officers were called to the Georgia Inn after a 
witness told police that a suspect showed her the explosive device and said she did not 
intend to use it at the hotel. It was intended use was against someone who killed a 
person in Hephzibah. After a prescription bottle with a .38 caliber bullet, potassium 
nitrate, matches, and wick were discovered a room, the building was evacuated. The 
Richmond County Bomb Squad was called to the scene to disengage the device and 
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render it safe. A Richmond county sheriff’s captain said the results of the investigation 
were turned over to the Bureau of Alcohol, Tobacco, Firearms, and Explosives. The 
suspect was charged with possession/manufacturing of a destructive device. 

Source: http://chronicle.augusta.com/news/crime-courts/2012-10-17/bomb-squad- 
called-motel-morning- 1 -arrested 

37. October 17, Toledo Blade - (Ohio) 3 killed, 2 wounded during domestic situation at 
Lake Township apartment complex. Police in Lake Township, Ohio, shot and killed 
a gunman after he shot and killed his ex-girlfriend and their 3-year-old child October 
16, in an incident in which two other people were wounded, the Lake Township police 
chief said. The adult victim and the suspect were pronounced dead at the scene, while 
the child was taken to an area hospital and later pronounced dead. Gunshots were heard 
and the crime was initially reported as a home invasion, the police chief said. When 
police arrived at the scene, an adult male was armed and outside the Eastpointe on the 
Mall complex on Laketon Terrace. The chief said through the investigation, authorities 
learned that the shooting incident began in a building off Lakepointe Drive. 

Source: http://www.toledoblade.com/Police-Lire/2012/10/17/5-people-shot-during- 
domestic-situation-at-Lake-Township-apartment-complex.html 

38. October 17, Associated Press - (Colorado) 5 dead in apparent arson-homicide at 
Denver bar. Live people were found dead in a bar outside Denver where a fire broke 
out October 17, and police believed the blaze was set to cover up the murders. The fire 
at Eero’s Bar & Grill was reported around closing time, the police chief said. 
Lirefighters found four women and one man dead inside the bar. Police do not think 
they died in the fire. “The business has obviously been set on fire, an arson, I’m 
guessing, to mask the homicide that occurred inside,” said a police commander. “There 
is just trauma, enough information to believe that we have a homicide that occurred 
here. They didn’t perish in the fire,” he said. The fire did not appear to be a very large 
one. No damage to the bar was visible from the street or aerial news coverage. The bar 
is located in a strip mall about five miles south of downtown Denver just outside of the 
Cherry Creek North shopping district on one of the city’s busiest streets, Colorado 
Boulevard. Autopsies were expected to be conducted October 17. 

Source: http://www.seattlepi.com/news/article/5-dead-in-apparent-arson-homicide-at- 
Denver-bar-3956039.php 

39. October 17, WCAU 10 Philadelphia - (New York) Bomb found at NY Home Depot 
part of extortion attempt: sources. Law enforcement officials were investigating after 
someone left an explosive device at a Home Depot on Long Island, New York, and 
they are concerned the person may try to do it again, WNBC 4 New York reported 
October 17. The crude pipe bomb was left at the store on New York Avenue in 
Huntington as part of an extortion attempt, law enforcement sources said. A letter was 
also mailed there demanding money and describing where the bomb was inside the 
building. The letter had been sitting for some time in the store before it was opened 
October 15. It stated that if the money was not paid by Black Lriday, November 23, 
more devices could be planted. Sources said the threat letter was mailed from Long 
Island. Responding police located the pipe bomb on a shelf behind some boxes. The 
pipe bomb was destroyed by the Suffolk County Bomb Squad October 15. Sources said 
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the bomb did not have a timer attached to it but if someone had opened the box 
containing the device, it could have detonated. The FBI joined Suffolk County Police in 
the investigation. They are working to find the suspect in case he or she tries to place 
other devices at other stores. Police across Long Island and in New York City have 
been made aware of the threat, as have Home Depot stores in the area, the sources said. 
Suffolk police said there were about 50 people in the store when it was shut down. 
Source: http://www.nbcphiladelphia.com/news/national-international/Home-Depot- 
Pipe-Bomb-Huntington-Suffolk-Countv-New-York-Avenue-174451551.html 

40. October 16, San Francisco Chronicle - (California) 7 million damage in West Portal 
blaze. The fire that burned through several buildings in San Francisco’s West Portal 
neighborhood October 12, caused an estimated $7.35 million in damages, fire officials 
said October 16. The fire was first reported at the Squat and Gobble restaurant, but it 
quickly spread to two neighboring buildings and disrupted the Muni train commute at 
the nearby station. The flames collapsed Squat and Gobble’s attic, wreaking about 
$900,000 in property damage and $1 million in content damage, said a fire department 
spokeswoman. The building next door, which housed the wine bar Vin Debut, and an 
orthodontist’s office, sustained about $1.1 million in structural damage and $3.5 
million in content damage. The Ulloa Street building on the other side of Squat and 
Gobble was hit with about $750,000 in property damage and $100,000 in content 
damage. The building consisted of two businesses and several residential units, but 
nobody was displaced, according to the fire department. However, the two buildings on 
West Portal Avenue were red-tagged by the Department of Building Inspection and 
currently, no one is allowed inside. Two firefighters were injured in the fire. The cause 
of the blaze was still under investigation, but the spokeswoman said it did not appear to 
be suspicious. 

Source: http://www.sfgate.com/bavarea/article/7-million-damage-in-West-Portal-blaze- 
3954297.php 
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National Monuments and Icons Sector 

41. October 16, KVOA 4 Tucson - (Arizona) Wildfire forces closure of section of Tonto 
National Forest. A section of Tonto National Forest in Arizona was temporarily closed 
while crews fought a wildfire that grew to an estimated 150 acres since it started 
October 14. The Big Canyon Fire was burning about 14 miles west of Payson and 2 
miles west of the Tonto Fish Hatchery, in a rough and remote section of the Tonto 
National Forest. Forest Service officials said the fire was sparked by lightning. 
Additional ground and air resources arrived to fight the fire October 16. Officials 
expected the fire to be fully contained by October 28. 

Source: http://www.kvoa.com/news/wildfire-forces-closure-of-section-of-tonto- 
national-forest/ 
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Dams Sector 



42. October 16, Associated Press - (National) Corps study cites vulnerabilities in wake 
of Missouri River flooding. A study released by the U.S. Army Corps of Engineers 
October 15, said the agency did what it could to manage the historic 2011 flooding on 
the Missouri River but that more repairs, research, and monitoring are needed to 
mitigate damage in future high flow years. The flooding began after the Corps released 
massive amounts of water from upstream reservoirs that had been filled with melting 
snow and heavy rains. The onslaught lasted for more than 100 days, busting levees, 
carving gouges up to 50 feet deep, and dumping debris on farmers’ fields. The Corps 
said about $400 million would be spent to fix damage along the Missouri River caused 
by the 2011 flooding. Most levee fixes are expected to be done before spring of 2013, 
with work on the dams expected to take longer. More funding might be required for the 
repairs, but the Corps said it was still evaluating the amount. The study also said more 
water gauges are needed on the Missouri River. It notes that between 1990 and 2010, 
387 gauges that once were monitored by the U.S. Geological Survey were 
discontinued. Seventeen other gauges now provide less information. 

Source: http://www.columbiatribune.com/news/2012/oct/16/corps-study-cites- 
vulnerabilities-in-wake-of/ 
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